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DETAILED ACTION 

The Office Action is in response to Request for Continuation Examination (RCE) filed 
January 27, 2009. Claims 1-3, 5, 7-19, 21-27, 54-59 are presented for further 
examination. 



Information Disclosure Statement 

1 . The information disclosure statement (IDS) submitted on January 27, 2009 is in 
compliance with the provisions of 37 CFR 1 .97. Accordingly, the information disclosure 
statement is being considered by the examiner. 



Claim Rejections - 35 USC § 102 

2. The following is a quotation of the appropriate paragraphs of 35 U.S.C. 1 02 that 
form the basis for the rejections under this section made in this Office action: 

A person shall be entitled to a patent unless - 

(e) the invention was described in (1 ) an application for patent, published under section 1 22(b), by 
another filed in the United States before the invention by the applicant for patent or (2) a patent 
granted on an application for patent by another filed in the United States before the invention by the 
applicant for patent, except that an international application filed under the treaty defined in section 
351 (a) shall have the effects for purposes of this subsection of an application filed in the United States 
only if the international application designated the United States and was published under Article 21(2) 
of such treaty in the English language. 

3. Claims 1-2, 5, 7-13-19, 21-27, 54-59 are rejected under 35 U.S.C. 102(e) as 
being anticipated by Lachman, III et al. (hereinafter "Lach", US Patent Publication 
2002/0166063 Al). 

As per claim 1 , Lach discloses a system for controlling transmission of data 



packets through an information network, each data packet comprising a content portion. 
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a header, and a trailer, tlie information network having a plurality of user workstations 
communicatively coupled to a network access point (NAP), said system comprising: 

• A Regional Transaction Processor (RTP) (paragraphs [0070-0072]); 

• a data Enabling Device (DED), said DED being disposed at the NAP and 
communicatively coupled to the RTP, said DED containing content match 
information and operable to: 

a. inspect at least the content portions of data packets transiting the NAP 
(paragraphs [0073, 0081, 0098]); 

b. forward an inspected data packet when information within the content 
portion of a data packet is not substantially similar to content match information 
(paragraphs [0112, 0117]); 

c. when information within the content portion of an inspected data packet is 
substantially similar to content match information, temporarily store the inspected 
data packet, initiate issuance of a DED message to a recipient user workstation 
and invoke the RTP to process a transaction (paragraphs [01 01,0111,01 20- 
0121,0124, 0172]); 

d. the RTP transmits an RTP message to the DED authorizing forwarding of 
the data packet only when a result of the transaction indicates that forwarding is 
appropriate (paragraphs [0107, 0110, 0112, 0114]). 
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As per claim 2, Lach discloses the system as set forth in claim 1 , wherein the 
transaction is based on control information associated with the content match 
information (paragraphs [0017, 0020]). 

As per claim 5, Lach discloses the system, as set forth in claim 1 , wherein the 
RTP comprises a network server and a database, and is operable to process requests 
for content (paragraphs [0069-0071]) 

As per claim 7, Lach discloses the system, as set forth in claim 1 , further 
comprising a plurality of NAPs along a network route, wherein each NAP has an 
associated DED operable to communicate with at least one of the other DEDS 
(paragraph [0116]). 

As per claim 8, Lach discloses the system, as set forth in claim 7, wherein a first 
NAP include a first DED for generating a DED message and the system comprises at 
least one intermediate DEDS operable to forward the DED message to a DED closest, 
within the information network, to the recipient user workstation (paragraph 01 16]). 

As per claim 9, Lach discloses the system, as set forth in claim 7, wherein a 
plurality of DEDS are operable to communicate with each other to prevent transmitting 
more than one DED message for the same data packet within the information network 
(paragraph [0117]). 
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As per claim 10, Lach discloses the system, as set forth in claim wherein the 
RTP transmits one of a Release Content message and a Cease-content message to the 
DED, based on result of the transaction (paragraph [0190]). 

As per claim 1 1 , Lach discloses the system, as set forth In claim 1 , wherein 
the DED includes Field Programmable Gate Arrays (FPGAS) (paragraphs [0065-0066]). 

As per claim 12, Lach discloses the system, as set forth in claim 1 1 , wherein the 
FPGAS are reprogrammed over the network to perform a content matching function 
(paragraphs [0065, 0067, 0081]). 

As per claim 1 3, Lach discloses the system, as set forth in claim 1 1 , wherein a 
portion of the DED is dynamically reprogrammed and the DED is operable to continue 
processing the data packets during the dynamic reprogramming (paragraph [01 14]). 

As per claim 14, Lach discloses the system, as set forth in claim 1 , further 
comprising a Central Storage and Backup System (CSBS) operable to communicate 
with the RTP, to monitor operation of the RTP, and to store transaction information 
(paragraph [0129]). 
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As per claim 15, Lach discloses the system, as set forth in claim 14, wherein the 
CSBS is operable to transmit information to reprogram the DED to communicate with 
another RTP (paragraph [01 14]). 

As per claim 16, Lach discloses the system, as set forth in claim 1 , further 
comprising a content matching server operable to store content match information, to 
communicate with the DED, and to transmit the content match information to the DED 
(paragraphs [0098, 0109-0110]). 

As per claim 17, Lach discloses the system, as set forth in claim 1 , wherein the 
DED is operable to suspend transmission of the data packets through the information 
network until a response to a prompt is received (paragraph [01 11]). 

As per claim 18, Lach discloses a method, an apparatus, and a computer 
program product for controlling transmission of data packets through an information 
network, each data packet comprising a content portion, a header, and a trailer, the 
information network having a plurality of user workstations communicatively coupled to 
a network access point (NAP), said method comprising: 

• Inspecting at least the content portions of data packets transiting the NAP with a 
Data Enabling Device (DED), said DED being disposed at the NAP and 
communicatively coupled to a Regional Transaction Processor (RTP), said DED 
containing content match information (paragraphs [0020, 0110]); 
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• Forwarding an inspected data packet when information within the content portion of 
the inspected data packet is not substantially similar to content match information 
(paragraphs [0110-01 1 1]); 

• when information within the content portion of an inspected data packet is 
substantially similar to content match information, temporarily storing the inspected 
data packet, issuing a prompt to a recipient user workstation, and invoking the RTP 
to process a transaction (paragraphs [01 01 , 01 1 1 , 01 20-01 21 , 01 24]). 

As per claim 19, Lach discloses the method, an apparatus, and a computer 
program product as set forth in claims 18 and 28, wherein the prompt is based on 
control information associated with the content match information (paragraphs [0017, 
0020]). 

As per claim 21, Lach discloses the method, an apparatus, and a computer 
program product as set forth in claims 18, 28, 36, further comprising: processing a 
transaction based on a response to the prompt received from the recipient user 
workstation (paragraph [0172]). 

As per claim 22, Lach discloses the method, an apparatus, and a computer 
program product as set forth in claims 18, 28, 36,wherein the information network 
comprises a plurality of DEDs, and the method further comprising transmitting a 
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message among a plurality of DEDS along the transmission path to prevent transmitting 
more than one prompt for the same data packet (paragraph [01 1 7]). 

As per claim 23, Lach discloses the method, an apparatus, and a computer 
program product as set forth in claims 18, 28, 39, further comprising: processing a 
transaction based on a user response to the prompt, and transmitting a Release 
Content or Cease Content message to the DED based on whether content was 
authorized to be downloaded to the workstation as part of the transaction (paragraph 
[0190]). 

As per claim 24, Lach discloses the method, an apparatus, and a computer 
program product as set forth in claims 18, 28, further comprising: reprogramming a 
portion of the DED to detect different content match information (paragraph [01 14]). 

As per claim 25, Lach discloses the method, an apparatus, and a computer 
program product as set forth in claims 18, 28, further comprising suspending 
transmission of a data packet through the information network until a user response to 
the prompt is received (paragraph [01 1 1]). 

As per claim 26, Lach discloses a computer program product comprising: 
program instructions to implement the method of claim 18 (paragraphs [0064-0067]). 
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As per claim 27, Lach discloses a data signal comprising: 
program instructions to implement the method of claim 18 (paragraphs [0064-0067]). 

As per claim 54, Lach discloses the system, as set forth in claim 1 , wherein the 
DED is further operable to search the data packets for content match information to 
determine whether transmission of data packets containing particular content should be 
unconditionally prevented, and when the DED finds such content match information, the 
DED prevents without additional processing, forwarding of data packets containing said 
particular content, without additional processing (paragraph 0087, 0090]). 

As per claim 55, Lach discloses the system, as set forth in claim 1 , wherein a 
content provider supplies transaction instructions to the RTP for use by the RTF when 
processing a transaction when the DED finds the content match information in a data 
packet (paragraphs [0082-0083]). 

As per claim 56, Lach discloses the system, as set forth in claim 55, wherein the 
instructions include transmitting a transaction prompt to the recipient user workstation 
informing of a price to pay for content in a data packet, and allowing the user to accept 
or decline purchase of the content (paragraph [0126]). 

As per claim 57, Lach discloses the system, as set forth in claim 55, wherein the 
instructions specify transmitting a prompt to inform a user that content infected with a 
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virus is attempting to be transmitted from or received by the recipient user worl<station 
and that transmission or reception of the virus is being halted (paragraph [0176]). 

As per claim 58, Lach discloses the system, as set forth in claim 55, wherein the 
instructions include transmitting a prompt to the recipient user workstation to inform that 
content subject to security control is attempting to be transmitted from or received by 
the recipient user's workstation, and that transmission or reception of the content is 
being halted (paragraph [0169]). 

As per claim 59, Lach discloses the system, as set forth in claim 1 , wherein the 
RTP tallies statistics regarding transmission of designated content (paragraph [0172]). 

Claim Rejections - 35 USC § 103 

1 . The following is a quotation of 35 U.S.C. 1 03(a) which forms the basis for all 
obviousness rejections set forth in this Office action: 

(a) A patent may not be obtained though the invention is not identically disclosed or described as set 
forth in section 102 of this title, if the differences between the subject matter sought to be patented and 
the prior art are such that the subject matter as a whole would have been obvious at the time the 
invention was made to a person having ordinary skill in the art to which said subject matter pertains. 
Patentability shall not be negatived by the manner in which the invention was made. 

2. Claim 3 is rejected under 35 U.S.C. 103(a) as being unpatentable over Lachman, 
III et al. (hereinafter "Lach", US Patent Publication 2002/0166063 A1) in view of May 
(US Patent 5,710,757). 

As per claim 3, Lach discloses the system, as set forth in claim 1 . 
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Lach does not explicitly disclose wherein the DED is operable to detect when the data 
packets include content match information at a rate proportional to the rate at which the 
data packets are received by the DED. 

However, in an analogous art. May discloses an electronic device setting a decoding 
rate to be an address rate, then reads the address data at the address rate. The device 
determines that the address data matches an address of the electronic device. The 
device then adjusts the decoding rate to be a message rate different than the address 
rate, where the message rate corresponds to the address (column 2, lines 11 -25). 

Therefore, one of ordinary skill in the art at the time the invention was made 
would have found it obvious to incorporate or implement May's detecting when the one 
or more data packets include content match information at a rate proportional to the rate 
at which the data packets are received in Lach's system allowing service providers to 
transmit and electronic device to process different types of messages at different rates. 



Response to Arguments 
The Office notes the following argument(s): 

(a) Lachman III (US Patent Publication 2002/01 66063 A1 ) claims priority to Lachman 
I (US Provisional Patent Application serial no. 60/272,712) filed March 1, 2001. The 
filing date of the instant application falls between Lachman III and the provisional 
application. Any new matter in Lachman III cannot be used as prior art against the 
claims of the instant application. 
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(b) The Examiner failed to state which of the two specifications she intended in the 
underlined phrase "the specification". 

(c) Meeting the written description requirement is a necessary but far from sufficient 
condition for Lachman 2 (US Patent Application 2002/0166063 A1) to be used as prior 

art against instant application. 

(d) Lachman 1 (US Provisional Application 60/272,712) must meet all of the 
requirements of 35 U.S.C 112, first paragraph with respect to the subject matter relied 
upon in making the rejection. 

(e) Lachman 1 must disclose the invention claimed in Lachman 2 in the manner 
provided by the first paragraph of section 112. 

(f) The Examiner failed to even assert that the invention claimed in Lachman 2 is 
disclosed in Lachman 1 in the manner provided by first paragraph of 1 12. 

3. Applicant's arguments filed have been fully considered but they are not 
persuasive. 

In response to: 

(a) The provisional application, Lachman I (60/272,712), for which Lachman III 
(US Patent Application Publication 2002/0166063 A1) claims benefit, discloses subject 
matter which is described in the specification in such a way as to reasonably convey to 
one skilled in the relevant art that the inventor(s), at the time the application (US Patent 
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Publication 2002/0166063 A1) was filed, had possession of the claimed invention. 
Therefore, Lachman III can be used as prior art against the instant application. 
Therefore, the effective date of the patent is the provisional date of March 1 , 2001 . 

(b) The Examiner stated the following: 

The provisional application, Lachman I (60/272,712), for which Lachman III (US 
Patent Application Publication 2002/0166063 A1) claims benefit, discloses subject 
matter which is described in the specification in such a way as to reasonably convey to 
one skilled in the relevant art that the inventor(s), at the time the application (US Patent 
Publication 2002/0166063 A1) was filed, had possession of the claimed invention. 
Therefore, Lachman III can be used as prior art against the instant application. 
Therefore, the effective date of the patent is the provisional date of March 1 , 2001 . 
"The specification" in the above statement refers back to the provisional application, 
Lachman I (60/272,712). 

(c) -(d) Lachman 2 teaches triggering an "Alert" message (DED message), as well as 
providing attack reports and displaying "Warning" messages (RTP message) 
(paragraphs [0101, 0128, 0153]). 

Lachman 1 teaches this feature of an "Alert" message, as well as providing attack 
reports and displaying "Warning" messages (Specification, page 9, lines 10-11, page 
10, lines 3-7). 

Therefore, both Lachman 1 and Lachman 2 discloses inspecting data packets and 
issuing of a DED message and RTP message. 
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Lachman 2 further teaches an offensive countermeasure server/router (RTP) which can 
provide a pathway for initiating an offensive countermeasure against attacker. This 
server/router is connected to the A.N.T. system (DED) (paragraphs [0070-0071]). 
Lachman 1 teaches this feature of a countermeasure router used to initiate a 
countermeasure against attacker. The router is connected to the A.N.T. system (DED) 
(Specification, page 7, lines 6-8, 15-16, 18-20, page 11, lines 11-13). 
Therefore, both Lachman 1 and Lachman 2 indeed discloses Applicant's DED and RTP. 

Lachman 2 teaches an A.N.T. system that analyzes packets to determine if they match 
a signature of an attack type, or if they contain similar or matching data. The packet 
snifffing module of the system compares information within packets to detect packets 
comprising similar or matching information (paragraphs [0073, 0081, 0098, 0100]). 
Lachman 1 teaches this feature of an A.N.T. system that analyzes packets abd 
determines matching data. The packet sniffing module compares information within 
packets to detect similar or matching information (Specification, page 4, lines 19-23, 
page 5, lines 1-5, 10-13, page 9, lines 10-19, page 11, lines 10-14, 20-23). 
Therefore, both Lachman 2 and Lachman 1 undoubtedly discloses a DED operable to 
search data packets for content match information. 

Lachman 2 teaches the host router can deny or allow certain traffic to the host network. 
Packets that may part of an attack can be rejected from transmission (paragraphs 
[0111,0120]). 
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Lachman 1 teaches the feature of the host router denying or allowing certain traffic 
(Specification, page 7, lines 6-8, page 11, lines 3-5). 

Therefore, both Lachman 2 and Lachman 1 discloses preventing further transmission of 
packets. 

(e)-(f) As shown above, Lachman 1 teaches the features of Lachman 2 as used in the 
rejection of the instant application. Lachman 2 is disclosed in Lachman 1 in the manner 
provided by first paragraph of 1 12. 

Conclusion 

Any inquiry concerning this communication or earlier communications from the 
examiner should be directed to BARBARA N. BURGESS whose telephone number is 
(571)272-3996. The examiner can normally be reached on M-F (8:00am-4:00pm). 

If attempts to reach the examiner by telephone are unsuccessful, the examiner's 
supervisor, Ario Etienne can be reached on (571 ) 272-4001 . The fax phone number for 
the organization where this application or proceeding is assigned is 703-872-9306. 

Information regarding the status of an application may be obtained from the 
Patent Application Information Retrieval (PAIR) system. Status information for 
published applications may be obtained from either Private PAIR or Public PAIR. 
Status information for unpublished applications is available through Private PAIR only. 
For more information about the PAIR system, see http://pair-direct.uspto.gov. Should 
you have questions on access to the Private PAIR system, contact the Electronic 
Business Center (EBC) at 866-217-9197 (toll-free). 
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/Barbara N Burgess/ 
Examiner, Art Unit 2457 

February 12, 2009 



Barbara N Burgess 

Examiner 

Art Unit 2457 



/ARIO ETIENNE/ 

Supervisory Patent Examiner, Art Unit 2457 



